$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: cg/2yOEFu1DKV+1dzOFPE3rtCgljKk86AIIQleFZqoc= Subject key identifier: F1:76:66:C4:E5:0B:B9:E3:15:76:26:0A:79:1C:99:54:1B:26:CD:D6 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019DD2764C466FE9AE1208F42A52F9ED2439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 15A1 Signing time: Tue 28 Apr 2026 05:01:01 +0000 Manifest this update: Tue 28 Apr 2026 05:01:01 +0000 Manifest next update: Wed 29 Apr 2026 05:01:01 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 2wVSH7DbbBFamwMCif6XQUtTxIk.roa (hash: nRU5pIxzuuO27+LNhKgzJMI29vhQdEwZEamj8NL3TdU=) 3: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 4: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 5: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 6: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 7: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 8: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: gdNlPlaaW8gHiTrefNQCt1BqWE0il34vrtFCUDm1xes=) 9: fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa (hash: Ylr0PAtkX4RnnqQhXO7hSlCB/mcGM2aeVz/spIqCG+s=) 10: lWg7vkHZKoUTr9NcDvXsJHiO9NI.roa (hash: hnXLBiYzcA6j2q9gin73kUQrdgupmbTcJczhf1x1FMQ=) 11: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 12: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 13: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d2:76:4c:46:6f:e9:ae:12:08:f4:2a:52:f9:ed:24:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Apr 28 05:01:01 2026 GMT Not After : Apr 29 05:01:01 2026 GMT Subject: CN=f17666c4e50bb9e31576260a791c99541b26cdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:51:82:86:30:76:fd:0b:31:53:da:07:19: be:48:f3:14:65:69:f3:d7:27:14:81:38:eb:3d:40: e7:ae:87:08:0e:4a:0d:3a:c1:1a:ba:db:3f:7e:7f: 9f:65:aa:ef:45:ff:78:77:a9:b8:36:72:2b:b5:9f: 2a:ef:42:61:a1:7d:99:45:f3:d6:65:e9:c2:02:e3: c8:56:3d:26:ba:8a:d4:17:4d:64:5f:09:54:d9:57: 04:80:e4:0c:f0:fe:d2:58:35:11:fc:09:c1:b0:b3: b1:05:30:b2:0c:e6:63:d1:32:3c:b8:9e:f8:10:57: 18:7d:fc:9d:84:60:9b:3b:0e:96:d7:55:75:f2:15: f0:b9:12:72:df:d3:b2:a3:f3:2c:49:bd:e2:23:bf: 08:50:ef:6f:d2:b1:99:6c:d9:3d:6d:12:fd:ec:88: 89:38:63:c6:db:c6:46:91:c2:f7:82:ff:c6:da:c2: 04:4c:16:20:ee:51:65:ac:ff:fb:a9:e4:9d:f0:03: c5:09:7b:df:09:70:6f:11:80:e1:b6:41:0c:aa:d2: 1f:61:3b:d2:74:35:99:04:0f:e7:b3:16:e1:4c:50: a5:a5:ea:74:26:89:91:34:7c:72:4a:60:1b:ec:9b: a2:f8:ee:df:7f:dc:be:da:27:86:9e:2e:e8:85:b2: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:76:66:C4:E5:0B:B9:E3:15:76:26:0A:79:1C:99:54:1B:26:CD:D6 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:03:95:97:98:f7:40:db:ef:19:fa:9f:68:97:90:19:e6:03: 8d:f7:eb:4c:dc:e7:d6:f4:3d:15:95:8a:f6:0a:92:ee:56:8a: 74:3c:ef:62:8c:a3:f6:69:50:8a:9e:c1:a2:97:55:7e:c0:2d: 3d:4f:cb:52:c6:c6:66:d5:23:5f:22:a7:98:dd:62:63:aa:48: 57:54:e9:d0:9c:fb:37:30:2d:37:37:0e:44:b8:e8:e1:4c:e4: 56:be:75:4a:5e:3c:91:e1:4d:4f:36:04:69:fc:98:a7:65:19: 31:71:9d:75:6f:00:01:7f:23:45:a5:05:91:59:9b:9f:3d:84: 8c:02:5c:5b:bb:1a:2e:28:9d:33:7e:ab:18:d0:d8:5c:d7:40: 77:6f:fd:2e:e3:80:7b:74:ad:fa:f1:33:6b:76:85:c1:73:18: 69:0d:a2:87:9c:b5:2e:f1:66:61:95:1e:ff:52:78:15:0f:ea: ae:bc:27:76:02:68:37:64:ed:75:d0:24:3d:79:c6:fc:08:54: 31:7a:b0:95:51:a4:5a:8c:40:97:21:0a:1d:86:30:0a:64:d8: fd:e0:ab:ee:e7:4a:17:4d:46:9f:2f:6d:07:fe:5c:2a:02:d7: 2f:ae:43:03:18:3a:de:f1:d7:80:10:7d:90:0b:5d:e5:f1:99: b6:ab:d0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3SdkxGb+muEgj0KlL57SQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwNDI4MDUwMTAxWhcNMjYwNDI5MDUwMTAxWjAzMTEwLwYDVQQD EyhmMTc2NjZjNGU1MGJiOWUzMTU3NjI2MGE3OTFjOTk1NDFiMjZjZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7xRgoYwdv0LMVPaBxm+SPMUZWnz 1ycUgTjrPUDnrocIDkoNOsEauts/fn+fZarvRf94d6m4NnIrtZ8q70JhoX2ZRfPW ZenCAuPIVj0muorUF01kXwlU2VcEgOQM8P7SWDUR/AnBsLOxBTCyDOZj0TI8uJ74 EFcYffydhGCbOw6W11V18hXwuRJy39Oyo/MsSb3iI78IUO9v0rGZbNk9bRL97IiJ OGPG28ZGkcL3gv/G2sIETBYg7lFlrP/7qeSd8APFCXvfCXBvEYDhtkEMqtIfYTvS dDWZBA/nsxbhTFClpep0JomRNHxySmAb7Jui+O7ff9y+2ieGni7ohbIPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPF2ZsTlC7njFXYmCnkcmVQbJs3WMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQOVl5j3 QNvvGfqfaJeQGeYDjffrTNzn1vQ9FZWK9gqS7laKdDzvYoyj9mlQip7BopdVfsAt PU/LUsbGZtUjXyKnmN1iY6pIV1Tp0Jz7NzAtNzcORLjo4UzkVr51Sl48keFNTzYE afyYp2UZMXGddW8AAX8jRaUFkVmbnz2EjAJcW7saLiidM36rGNDYXNdAd2/9LuOA e3St+vEza3aFwXMYaQ2ih5y1LvFmYZUe/1J4FQ/qrrwndgJoN2TtddAkPXnG/AhU MXqwlVGkWoxAlyEKHYYwCmTY/eCr7udKF01Gny9tB/5cKgLXL65DAxg63vHXgBB9 kAtd5fGZtqvQuA== -----END CERTIFICATE-----Generated at Tue Apr 28 15:05:44 2026 by rpki-client